Hello,
I am running freeradius 0.1 with a cisco 3640.
Everything is working beautifully with a simple config
with everybody authing off the system password file.
However, I am attempting to setup some Static IP addreses
for specific users and the cisco seems to be just disregarding
the framed-ip-address attribute that the radius replies with.
Here is my users file:
testing Auth-Type := Local, Password == "testing"
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 172.16.3.33,
Framed-IP-Netmask = 255.255.255.0,
Framed-MTU = 1500,
Framed-Compression = Van-Jacobsen-TCP-IP
DEFAULT Auth-Type := System
Fall-Through = 1
Here is the output of the radtest script:
%./radtest testing testing localhost 0 XyXyXy
Sending Access-Request of id 235 to 127.0.0.1:1812
User-Name = "testing"
Password = "\365w\306\331\367\2301\020\3437\260M#\353\254v"
NAS-IP-Address = xxx.yyy.zzz
NAS-Port-Id = "0"
rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=235, length=56
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = 172.16.3.33
Framed-IP-Netmask = 255.255.255.0
Framed-MTU = 1500
Framed-Compression = Van-Jacobson-TCP-IP
As you can see, the radius server is replying with the correct
information, but the dial-in client still receives an ip address
out the ip pool that is defined on the cisco. Any suggestions?
Thanks.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html